CVE-2016-7114

highpriority · track · 36OT risk · elevatedEPSS 0.021 · 82 %ileEUUS
grimoire priorityP2 · Scheduled
Exploitable?
—
no known exploitation
Likely / severe?
2.11% (82nd) EPSS
CVSS 9 · high
Is it mine?
4 products
Check your exposure
Who says so?
4 sources
cnnvd · enisa_euvd · cisa_csaf_ot · nvd

EPSS · scored 2026-10-27

A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All versions < V1.11.00; Firmware variant DNP3 TCP for EN100 Ethernet module : All versions < V1.03; Firmware variant IEC 104 for EN100 Ethernet module : All versions < V1.21; EN100 Ethernet module included in SIPROTEC Merging Unit 6MU80 : All versions < 1.02.02; SIPROTEC 7SJ686 : All versions < V 4.87; SIPROTEC 7UT686 : All versions < V 4.02; SIPROTEC 7SD686 : All versions < V 4.05; SIPROTEC 7SJ66 : All versions < V 4.30. Attackers with network access to the device's web interface (port 80/tcp) could possibly circumvent authentication and perform certain administrative operations. A legitimate user must be logged into the web interface for the attack to be successful.

01

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

  • FixedEN100 Ethernet modules as optional for Reyrollecisa_csaf_ot

    For more information on these vulnerabilities and more detailed mitigation instructions, please see Siemens Security Advisory SSA-452237 at the following location:

  • FixedFirmware variant DNP3 TCP for EN100 Ethernet modulecisa_csaf_ot

    Install V1.03 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821

    https://support.industry.siemens.com/cs/us/en/view/109745821
  • FixedFirmware variant IEC 104 for EN100 Ethernet modulecisa_csaf_ot

    Install V1.21 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821

    https://support.industry.siemens.com/cs/us/en/view/109745821
  • FixedFirmware variant Modbus TCP for EN100 Ethernet modulecisa_csaf_ot

    Install V1.11.00 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821

    https://support.industry.siemens.com/cs/us/en/view/109745821
  • FixedFirmware variant PROFINET IO for EN100 Ethernet modulecisa_csaf_ot

    Install V1.04.01 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821

    https://support.industry.siemens.com/cs/us/en/view/109745821
  • FixedSIPROTEC 7SJ66cisa_csaf_ot

    Install V 4.30 - Download: https://support.industry.siemens.com/cs/us/en/view/109743555

    https://support.industry.siemens.com/cs/us/en/view/109743555
  • FixedIEC 61850 firmwarecisa_csaf_ot

    In addition, ICS-CERT recommends that users take the following measures to protect themselves from social engineering attacks:

  • FixedTPOP firmwarecisa_csaf_ot

    In addition, ICS-CERT recommends that users take the following measures to protect themselves from social engineering attacks:

  • MitigationEN100 Ethernet module (as optional for SIPROTEC 4 and SIPROTEC Compact)cisa_csaf_ot

    Siemens provides firmware update V4.29 for EN100 modules included in SIPROTEC 4 and SIPROTEC Compact devices to fix the vulnerabilities. Siemens recommends users update to the latest firmware version.

  • MitigationEN100 Ethernet module included in SIPROTEC Merging Unit 6MU80cisa_csaf_ot

    Install V1.02.02 - Download: Please contact the Siemens hotline at support.energy@siemens.com

  • MitigationFirmware variant DNP3 TCP for EN100 Ethernet modulecisa_csaf_ot

    Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP

  • MitigationFirmware variant IEC 104 for EN100 Ethernet modulecisa_csaf_ot

    Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP

  • MitigationFirmware variant Modbus TCP for EN100 Ethernet modulecisa_csaf_ot

    Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP

  • MitigationFirmware variant PROFINET IO for EN100 Ethernet modulecisa_csaf_ot

    Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP

  • MitigationSIPROTEC 7SD686cisa_csaf_ot

    Install V4.05 - Download: http://www.siemensenergysector.com/ProductRelatedDown.aspx?ProductId=64

  • MitigationSIPROTEC 7SJ66cisa_csaf_ot

    Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP

  • MitigationSIPROTEC 7SJ686cisa_csaf_ot

    Install V 4.87 - Download: http://www.siemensenergysector.com/ProductRelatedDown.aspx?ProductId=51

  • MitigationSIPROTEC 7UT686cisa_csaf_ot

    Install V4.02 - Download: http://www.siemensenergysector.com/ProductRelatedDown.aspx?ProductId=68

02

cvss

Technical severity, 0–10. One row per scoring source.

9.0
010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 4.3–9

v2.09highAV:N/AC:L/Au:S/C:C/I:C/A:Cprimary · NVD / NIST USexploitability 8 · impact 10
v3.08.8highCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USexploitability 2.8 · impact 5.9
v3.04.3mediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:Nsecondary · CISA US
v3.08.1highCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)
03

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-287USprimaryCWE-287USCWE-288US
04

affected products (4)

Products and version ranges known to be affected.

05

advisories (4)

Vendor and ecosystem advisories describing this.

  • ICSA-16-250-01Siemens SIPROTEC 4 and SIPROTEC Compact Vulnerabilities2016-06-10icsa · cisa_csaf_otUS

    This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov

  • ICSA-17-187-02Siemens Reyrolle2017-07-06icsa · cisa_csaf_otUS

    ATTENTION: Remotely exploitable/low skill level to exploit.

  • ICSA-17-187-03FICSA-17-187-03F Siemens SIPROTEC 4 and SIPROTEC Compact (Update F)2017-07-04icsa · cisa_csaf_otUS

    CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.

  • ICSA-17-334-01Siemens SWT30002017-11-30icsa · cisa_csaf_otUS

    ATTENTION: Remotely exploitable/low skill level to exploit.

06

also known as (3)

Other names and identifiers for this entity.

07

sources

Which sources assert this record, and when.

cnnvdenisa_euvdcisa_csaf_otnvdNVDCVE.orgMITRE
published 2016-09-06modified 2026-06-17
09

references (11)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan